Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json)
Hash identifier: P+dWTMCvNn4bnBkmln54HGdzSTDAPW6fLG7Uk3tD/88=
Subject key identifier: 41:86:51:E3:4C:C1:C2:B6:40:63:5D:D5:0E:AC:33:31:14:80:E2:2E
Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Certificate serial: 01984B550813936EB8BE3BF767E9EF5AE060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
Manifest number: 0919
Signing time: Sun 27 Jul 2025 10:02:00 +0000
Manifest this update: Sun 27 Jul 2025 10:02:00 +0000
Manifest next update: Mon 28 Jul 2025 10:02:00 +0000
Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: ylgwIFmxhaPslp2iaVorXX2w4lIdRE5c1m4s7cB7h+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:08:13:93:6e:b8:be:3b:f7:67:e9:ef:5a:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Validity
Not Before: Jul 27 10:02:00 2025 GMT
Not After : Jul 28 10:02:00 2025 GMT
Subject: CN=418651e34cc1c2b640635dd50eac33311480e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:15:29:f5:2f:6a:b5:16:f8:81:e4:74:66:
c0:b2:e3:d8:f8:2d:cd:11:20:83:4f:bc:f7:3e:04:
06:9c:ed:bd:81:0e:d1:5c:b1:e0:cc:a7:b6:e5:66:
2c:27:77:17:2b:21:35:60:89:fa:bd:74:b7:d9:56:
7f:50:87:30:9d:06:07:6c:32:bf:78:70:be:76:29:
93:69:02:68:2d:f6:9e:9b:ea:a7:74:10:a3:6f:e9:
f4:5f:f0:5e:44:3c:4b:b8:b5:7c:17:de:5a:fb:57:
2d:4f:1e:58:e9:2b:eb:35:dc:62:8c:b6:24:bc:e3:
10:4c:d6:f7:38:cf:9f:13:1a:fd:67:5b:22:27:37:
2f:66:1a:cd:e6:4a:dd:a9:95:09:bf:f6:99:22:1b:
8f:af:3d:80:0c:8b:4a:4b:55:58:f6:90:0a:34:19:
2b:33:6c:7b:ea:60:2b:70:99:f6:83:36:07:25:35:
9d:e8:ec:1a:34:65:dd:a3:5b:69:b5:34:13:d4:1c:
68:e8:c6:7f:77:99:1f:bb:6a:6f:ef:1f:48:e0:0e:
a6:26:e7:e4:c3:b9:6f:8d:17:e8:95:33:d1:c0:fc:
9f:02:d2:1a:71:39:aa:76:96:d5:89:1d:a7:39:11:
f4:83:9b:e8:d8:8b:d5:1d:78:31:de:f4:e5:7c:7e:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:51:E3:4C:C1:C2:B6:40:63:5D:D5:0E:AC:33:31:14:80:E2:2E
X509v3 Authority Key Identifier:
keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:55:0d:d9:b6:04:1a:e3:61:30:da:bb:ad:f2:1e:9d:0a:aa:
c6:48:18:3f:f5:14:5b:7a:72:61:34:77:6f:d1:4a:c8:6a:25:
a2:0d:12:d1:d7:c9:10:a1:b3:e6:58:0e:c7:64:5d:13:85:6e:
cb:ff:12:f6:d4:3c:63:ee:e9:c8:b8:4c:fb:66:f8:7b:c2:f7:
9e:99:0d:2b:0e:a8:2b:e8:30:dd:24:04:09:40:42:2e:34:a6:
46:92:19:a7:1b:c3:df:da:ad:40:6e:10:83:f7:35:d8:03:5a:
b9:99:9e:36:f5:25:34:46:81:5a:09:02:79:94:ee:f7:2a:28:
dd:4e:05:8b:f0:62:5d:a7:98:20:0e:80:d5:ba:5e:b3:ec:ef:
e8:de:44:56:ba:33:4c:8a:f1:74:26:92:7f:6f:25:cd:41:ec:
e9:d1:06:1a:e3:ea:d7:38:6a:c6:4e:80:da:dc:4e:be:4d:94:
3b:1a:42:7e:30:02:fe:04:61:b2:f4:6b:0a:2e:59:7c:f8:8d:
1d:d1:9f:ac:ee:8f:44:32:c4:71:14:df:7d:9b:0b:6a:76:1b:
29:e8:4d:c8:12:3e:ca:33:76:ac:fe:02:37:43:e9:9b:c2:e7:
76:aa:a6:ee:86:1a:9f:ad:03:24:fd:ab:73:f1:99:44:c2:66:
df:68:2e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVQgTk264vjv3Z+nvWuBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjc1NmViMjRhM2UzNTJiZDZlODlkMWY1YWEwODQ4ODk2
MWE2NzQwHhcNMjUwNzI3MTAwMjAwWhcNMjUwNzI4MTAwMjAwWjAzMTEwLwYDVQQD
Eyg0MTg2NTFlMzRjYzFjMmI2NDA2MzVkZDUwZWFjMzMzMTE0ODBlMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJwVKfUvarUW+IHkdGbAsuPY+C3N
ESCDT7z3PgQGnO29gQ7RXLHgzKe25WYsJ3cXKyE1YIn6vXS32VZ/UIcwnQYHbDK/
eHC+dimTaQJoLfaem+qndBCjb+n0X/BeRDxLuLV8F95a+1ctTx5Y6SvrNdxijLYk
vOMQTNb3OM+fExr9Z1siJzcvZhrN5krdqZUJv/aZIhuPrz2ADItKS1VY9pAKNBkr
M2x76mArcJn2gzYHJTWd6OwaNGXdo1tptTQT1Bxo6MZ/d5kfu2pv7x9I4A6mJufk
w7lvjRfolTPRwPyfAtIacTmqdpbViR2nORH0g5vo2IvVHXgx3vTlfH53MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGGUeNMwcK2QGNd1Q6sMzEUgOIuMB8GA1UdIwQY
MBaAFIEnVusko+NSvW6J0fWqCEiJYaZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTct
NmQ1MjFiYzQ3NGY0LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTctNmQ1MjFiYzQ3NGY0
LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVUN2bYE
GuNhMNq7rfIenQqqxkgYP/UUW3pyYTR3b9FKyGolog0S0dfJEKGz5lgOx2RdE4Vu
y/8S9tQ8Y+7pyLhM+2b4e8L3npkNKw6oK+gw3SQECUBCLjSmRpIZpxvD39qtQG4Q
g/c12ANauZmeNvUlNEaBWgkCeZTu9yoo3U4Fi/BiXaeYIA6A1bpes+zv6N5EVroz
TIrxdCaSf28lzUHs6dEGGuPq1zhqxk6A2txOvk2UOxpCfjAC/gRhsvRrCi5ZfPiN
HdGfrO6PRDLEcRTffZsLanYbKehNyBI+yjN2rP4CN0Ppm8Lndqqm7oYan60DJP2r
c/GZRMJm32gusQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:40:53 2025 by rpki-client